120 matches found
Xerver Version Detection
This script finds the running Xerver Version and saves the result in KB. OpenVAS Vulnerability Test $Id: gbxerverhttpserverdetect.nasl 5499 2017-03-06 13:06:09Z teissa $ Xerver Version Detection Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Thi...
Design/Logic Flaw
Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name...
CVE-2009-3561
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action...
CVE-2009-3544
Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name...
CVE-2009-3562
Cross-site scripting XSS vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action...
Directory traversal
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action...
Cross site scripting
Cross-site scripting XSS vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action...
CVE-2009-3544
CVE-2009-3544 affects Xerver HTTP Server 4.32. A remote attacker can disclose the source of a web page by sending a crafted HTTP request with ::$DATA appended after the filename, leading to information disclosure. Multiple sources (NVD/OpenVAS/Seebug) confirm the vulnerability and its impact as s...
CVE-2009-3562
Cross-site scripting XSS vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action...
CVE-2009-3561
Summary of CVE-2009-3561 : A directory traversal vulnerability in the Xerver HTTP Server (version 4.32) allows remote attackers to read arbitrary files by supplying a drive-letter path in the currentPath parameter of the chooseDirectory action. The flaw is exposed in the management interface runn...
CVE-2009-3562
CVE-2009-3562 affects Xerver HTTP Server 4.32. The XSS vulnerability is triggered in the management interface when action=chooseDirectory and the currentPath parameter is not properly validated, allowing remote attackers to inject arbitrary scripts/HTML. Affected product: Xerver HTTP Server (core...
CVE-2009-3561
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action...
CVE-2009-3544
Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name...
CVE-2009-3561: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action...
CVE-2009-3544: Exposure of Sensitive Information to an Unauthorized Actor
Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name...
Xerver 4.32 Denial Of Service
Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver v4.32 is vulnerable to a remote denia...
Xerver HTTP Server 4.32 - Cross-Site Scripting Directory Traversal
Xerver HTTP Server 4.32 - Cross-Site Scripting Directory Traversal Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory¤tPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory¤tPath=c:...
Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability
No description provided by source. Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory¤tPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory¤tPath=c:\ XSS Exploit :...
Xerver HTTP Server 4.32 - Cross-Site Scripting / Directory Traversal
Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory¤tPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory¤tPath=c:\ XSS Exploit :...
Xerver HTTP Server 4.32 - Remote Denial of Service
Xerver HTTP Server 4.32 - Remote Denial of Service Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application...